SIEM, log management and other monitoring/detection security product users are split into two major categories: one actually uses the product while the other buys it for compliance and then eventually uses as a doorstop, for example. To be truly successful you might need to entice both users to be successful. The Minimalist SIEM/LM user still evolves from logs are dirt to raw collection of log data.”]
Source: http://chuvakin.blogspot.com/2010/03/log-management-siem-users-minimalist-vs.html